NIS2 Blog
News, analysis and practical guides on cybersecurity and the NIS2 directive.

DORA vs NIS2: Practical Guide for Banks, Insurers and Fintechs (2026)
Banks, insurers, fintechs: does DORA replace NIS2? The 2026 practical guide to navigate both regimes without duplicating effort.

NIS2 Article 20: 5 Boardroom Responsibilities Directors Cannot Delegate
Article 20 of Directive 2022/2555 moves cybersecurity formally into the boardroom. Here are the five responsibilities that now fall personally on directors.

NIS2 Incident Notification: The Practical 72-Hour Guide
A cyber incident strikes. The NIS2 clock starts. Here is exactly what you must do, hour by hour.

NIS2 Supply Chain Security: 5 Clauses to Require from Your Suppliers
Article 21(2)(d) of Directive 2022/2555 explicitly mandates supply chain security. Here are 5 concrete contractual clauses to add to every critical supplier contract.

NIS2 Sanctions: What Directors Really Risk
Fines, personal liability, management bans — NIS2 penalties are severe. What you need to know.

NIS2 and MSPs: New Obligations and Commercial Opportunities
NIS2 transforms the role of Managed Service Providers. New obligations, expanded responsibilities, and how to turn compliance into a competitive advantage.

NIS2: Which Organisations Are Affected and What They Must Do
Who is really affected by NIS2? Discover the criteria, sectors and first obligations to implement.